Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tehhj9rxbA3pqX-PLMXL9KR6GZM.roa
File: tehhj9rxbA3pqX-PLMXL9KR6GZM.roa (raw, json)
Hash identifier: bHPHAKB7/PXXQvmJfzhTulB/BrzAyTKSdKS4oE45DIM=
Subject key identifier: B5:E8:61:8F:DA:F1:6C:0D:E9:A9:7F:8F:2C:C5:CB:F4:A4:7A:19:93
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018473DF467D8DC7526EAC25AE180EDAD8DD
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tehhj9rxbA3pqX-PLMXL9KR6GZM.roa
Signing time: Mon 14 Nov 2022 02:02:02 +0000
ROA not before: Mon 14 Nov 2022 02:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.65.112.0/24 maxlen: 24
45.65.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:73:df:46:7d:8d:c7:52:6e:ac:25:ae:18:0e:da:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Nov 14 02:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5e8618fdaf16c0de9a97f8f2cc5cbf4a47a1993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:47:e3:8b:54:02:f2:1d:47:c4:bc:f5:de:
d3:06:f5:0b:88:63:fe:3f:aa:09:6f:56:68:28:47:
6e:6d:68:b8:90:db:25:3e:eb:c3:30:fe:39:a3:63:
a8:f6:96:2a:39:19:ca:cc:9d:d7:64:dc:e2:3d:d3:
85:20:36:32:86:0b:b6:7e:98:ad:72:b6:bb:94:32:
71:b0:56:af:02:74:b1:6c:d7:e5:00:03:35:0a:d7:
7e:0d:d6:1a:ac:00:5d:b8:cd:3c:45:69:18:36:ee:
fb:46:c7:c7:71:58:c2:b6:ff:f7:d4:ea:05:73:8f:
83:86:55:3c:8b:7b:22:cd:47:ec:52:53:dd:91:74:
fc:d6:f7:26:b4:ec:df:39:c0:3a:91:e7:8f:c5:59:
fb:05:2a:91:33:55:18:51:75:6c:d9:70:db:ee:24:
3c:73:09:f2:f9:30:33:30:70:4b:4f:fe:27:20:4a:
88:34:64:08:f8:51:0b:69:4b:53:5a:bc:0b:62:42:
ec:b5:6a:3e:4e:0d:5f:31:c6:79:b7:f5:c1:51:1a:
6e:24:5e:78:3c:f9:db:2a:08:2a:a2:a9:dc:0f:e4:
c6:1c:6b:40:41:dd:bf:be:12:bf:9b:96:2e:70:8f:
41:df:d5:75:4c:92:0a:a7:8a:38:c4:bf:f4:04:6a:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:61:8F:DA:F1:6C:0D:E9:A9:7F:8F:2C:C5:CB:F4:A4:7A:19:93
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/tehhj9rxbA3pqX-PLMXL9KR6GZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
45.65.114.0/23
Signature Algorithm: sha256WithRSAEncryption
58:2c:2b:e3:d7:eb:f3:a0:f2:cb:d9:ca:a6:90:d1:40:17:2a:
3c:b9:2d:5a:14:62:98:70:b9:7d:de:1f:17:fb:69:99:d0:ab:
00:4b:94:70:d4:63:44:0e:5b:93:c8:cd:64:01:cc:a0:1f:f9:
62:3f:f4:39:0d:f9:fb:a2:3e:35:ba:5e:e0:aa:33:f8:63:60:
f4:fe:dd:71:42:e4:34:b9:25:c7:98:35:e0:b2:e4:0d:60:50:
46:e0:4d:c2:a6:2f:15:ab:28:95:ad:98:35:8d:93:6d:e6:00:
79:e9:a0:0b:0f:90:4e:61:1b:a5:1c:eb:9f:5f:cc:33:8c:9e:
ca:a1:57:c6:fa:9d:3a:53:72:f6:ac:1d:7d:39:be:f6:13:74:
31:8f:d6:f7:24:c4:e3:a4:f9:a9:8a:f2:cd:8b:a5:5b:aa:c0:
a5:58:0c:2a:26:59:87:7d:b7:ce:9a:78:f3:04:d2:af:bb:0e:
a9:34:c4:c9:e0:b1:b0:16:7c:74:33:05:8a:e7:ce:15:00:fc:
e2:58:0e:56:7f:1d:cd:f7:29:fe:8d:0d:b2:ef:d4:95:08:8f:
1c:7b:15:ce:86:6a:f6:8f:d7:49:35:83:1e:15:0f:9f:d2:ee:
8a:1b:14:eb:b5:5c:8d:80:1b:e4:47:7a:8f:ab:e6:ff:46:9d:
d9:97:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:55 2024 by rpki-client on console-ams.rpki-client.org